Paul Holzinger c5f3e589b8 [v5.2-rhel] kube play: don't follow volume symlinks onto the host ...

For ConfigMap and Secret kube play volumes podman populates the data
from the yaml. However the volume content is not controlled by us and we
can be tricked following a symlink to a file on the host instead.

Fixes: CVE-2025-9566

Fixes: https://issues.redhat.com/browse/OCPBUGS-61265, https://issues.redhat.com/browse/OCPBUGS-61266

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>

2025-09-08 18:36:57 -04:00

..

entities

[v5.2-rhel] Fix HealthCheck log destination, count, and size defaults

2025-03-14 20:21:57 +01:00

filters

Replace golang.org/x/exp/slices with slices from std

2024-04-23 11:16:40 +02:00

infra

[v5.2-rhel] kube play: don't follow volume symlinks onto the host

2025-09-08 18:36:57 -04:00

utils

Merge pull request #21583 from Luap99/scp-port

2024-02-12 21:35:56 +00:00